Malware

Threat actors have been exploiting a DLL hijacking vulnerability in the Windows 10 Control Panel executable in new phishing attacks deploying the QBot malware, also known as QakBot, reports BleepingComputer.

Supply chain attack with Wasp info-stealer impacts hundreds Hundreds have already been compromised with a modified version of the Wasp information stealer in an ongoing supply chain attack leveraging malicious Python packages since last month, according to SecurityWeek.

BleepingComputer reports that organizations around the world are being targeted by expanded ARCrypter ransomware attacks, which originally compromised government agencies in Latin America.

Deep Instinct researchers say just because security pros don’t see a prevalence of infections from a specific group, it doesn’t mean the threat actors aren’t maintaining a presence or monitoring devices.

Despite a federal order mandating that civilian agencies identify and patch all known instances of the vulnerability, experts say the disclosure of a federal agency compromised through Log4j almost a year later underscores how the deeply embedded nature of the software bug will continue to facilitate intrusions for years to come.